Security Tools

Fraud Blocker is an AI-powered platform that blocks invalid ad traffic from bots, click farms, and AI agents, ensuring enterprises, marketers, and agencies pay only for real clicks and genuine leads. It uses AI agents trained on billions of clicks and IPs to identify sophisticated invalid traffic that traditional filters miss, then explains why each click or IP was blocked. This helps protect budgets, improve conversion quality, and reduce wasted ad spend.

AI agents don't just generate answers anymore. They take actions, call tools, and access real data. BotGauge helps engineering teams find where agents break before users do. Run adaptive red-team attacks and evals, catch security and behavioral failures, and replay every issue with full traces. Turn failures into regression tests, continuously retest as your agents evolve, and monitor their behavior in production. One reliability layer from development to deployment.

Route abliterated language models across providers with automatic fallbacks, modality-aware selection, and one place to compare availability and token prices.

Secure your Mac while building with AI. Plango monitors AI coding agents, protects sensitive files and secrets, blocks suspicious network activity, scans projects for vulnerabilities, and gives you control over what your agents can access. Powered by an on-device AI security model. Private by default.

Is this investor, founder, recruiter, or potential business partner who they claim to be? Searching their name might return thousands of results. Searching their face can give you the edge. Upload a photo and face2social searches for matching faces across Instagram, Facebook, LinkedIn, TikTok, and X. Compare names, check public profile information, spot inconsistencies, and make better-informed decisions about who you're connecting with. Free preview. No match, no charge.

GBrain Tools is a password manager for AI. Connect Gmail, GitHub, Stripe, Notion and many more once, then use them from ChatGPT, Claude, Claude Code, Cursor or your terminal. No AI holds a password, and every action lands on one log. $19 a month.

Compared with Dependabot and Renovate, LegacyFixer focuses on security-first scanning of Python dependencies. It reports vulnerability findings even when an automated fix is not appropriate, and creates a fix pull request only when its policy and validation checks allow it. Each scan produces an explicit outcome, including detect-only (NO_ACTION) when no fix PR is created. LegacyFixer runs as a GitHub App on Google Cloud Run.

Row-level security enforced server side, before any query runs. Set rules from user and org properties, test them as any user, and deploy one agent to thousands of tenants. The agent never sees the rules, so it can't bypass them.

One console for every server you run: web terminal, file editor, scheduled jobs, fleet-wide commands, 150+ install recipes, plus monitoring, phone alerts and status pages. No open port, and every command is signed in your browser.

AgentGuard scans AI agent SKILL.md files for security risks, hidden capabilities, and quality issues before you install them. Paste a Skill, get a Trust Report with scores, findings, and a clear verdict. Free to use — no account required.

A gate in the hook path of Claude Code, Codex, Cursor and Copilot. It shows what a command would delete, backs it up first, and asks or refuses by your policy. Start in observe mode: nothing blocked, a report of what it would have caught. Open source, Rust.

1. Self-serve compliance automation. Sign up, connect AWS, Google Workspace, Okta, GitHub and Slack, and 100+ tests run continuously for SOC 2, ISO 27001, HIPAA, PCI DSS and more. 2. No per-framework fees 3. 14-day free trial, no credit card 4. Built by a data-security company, so it also finds the AI apps and agents in your workspace and maps them to the customer data they can reach 5. Run it from the dashboard or Claude Code via MCP 6. Platform $4,995/yr. Audit, vCISO and pen test tiers above

Off the Record reshapes your voice in real time so people can understand you while AI notetakers and hidden interview copilots struggle to transcribe it.

Instead of one form per company, Ghostifier starts from your inbox. It finds who holds your data, unsubscribes you and opts you out of sale and sharing on day one, waits out the return window, then sends deletion requests and tracks every reply. Banks, insurers and your employer are left alone. It also asks data brokers to delete you. Gmail access is headers only, so it never reads your email bodies, and there is no AI: every decision follows fixed rules.

An MCP server can change what its tools do after you approved it. Your agent will call the new one and never notice. mcpgawk records a baseline of every MCP server your agents use, checks behaviour in a sandbox, and sits in the path: once a tool changes after you approved it, the call is refused until you decide. The agent cannot approve its own way past it. Everything runs on your machine. Nothing is uploaded. Free CLI, VS Code extension and MCP server. The gateway tier has a 7-day trial.

Caddy is a powerful, open-source web server and reverse proxy that makes deploying secure websites effortless. It automatically provisions and manages TLS certificates, solving the complexity of manual HTTPS configuration. Built for performance and extensibility, it's ideal for developers, sysadmins, and businesses of any size who need a reliable, secure, and scalable platform for their sites and applications.

Most two-factor authentication apps are built almost as an afterthought by big companies like Google and Microsoft, with a clunky, bare-bones experience. AuthMonster takes a different approach: we put user experience front and center, wrapped in a lovable brand starring Toki, your token-eating monster. Under the hood, you get painless migration from apps like Google Authenticator and LastPass, biometric locking, and a donation-based model instead of paywalled features."

VibeDefend installs on your AI coding agent (Claude Code, Cursor, Windsurf, Copilot, Codex and more) with one command. From then on the agent writes with your business rules, mined from your repo, and your security rules in its context. It scans each diff while the file is still open, and a guard refuses rm -rf, sudo or a read of your secrets before it runs. Scanners check code after the commit, this runs before the line is written. Free plan, no card.

OpenBao is an open-source secrets manager and fork of Vault, designed to securely manage, store, and distribute sensitive data like secrets, certificates, and encryption keys. It solves the problem of securing sensitive data across clouds and datacenters by providing centralized encryption, dynamic secret generation, and identity-based access control. It is for organizations and developers needing a robust, community-governed solution to protect their critical infrastructure secrets and data.

Connect a project and WebDecoy reads your Vercel log drain. No code changes. It identifies crawler traffic per request, verifies real crawlers against published IP ranges, and flags forged user agents. Monitoring only: it never blocks, never reports humans.

Pair2FA makes it easier for teams to share access to accounts protected by 2FA. No more asking someone for a code, sharing screenshots, or waiting for the person with the authenticator to be available. With Pair2FA, teammates can access the 2FA code when they need it, without interrupting whoever manages the account. It keeps shared accounts protected while making everyday team access much simpler.